Description
Application error or warning messages may expose sensitive information about an application's internal workings to an attacker.
Acunetix found an error message that may disclose sensitive information. By requesting a specially crafted URL, Acunetix generated an ASP.NET error message. The message contains a complete stack trace and Microsoft .NET Framework version.
Remediation
Adjust the application's web.config to enable custom errors for remote clients (refer to 'Detailed information' section).
References
Related Vulnerabilities
WordPress Plugin WebP Express Arbitrary File Disclosure (0.14.10)
WordPress Plugin TRADIES Information Disclosure (2.2.6)
WordPress W3 Total Cache plugin predictable cache filenames
Deprecated Header Instruction Used to Implement Content Security Policy (CSP)
WordPress Plugin WP Attachment Export Arbitrary File Download (0.2.3)